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Abstract 

A result on observational equivalence for PCF and innocent strate- 
gies, as presented at the Games for Logic and Programming Languages 
(GaLoP) workshop in York, March 2009. 

The full abstraction result for PCF using game semantics requires one 
to identify all innocent strategies that are innocently indistinguishable. 
This involves a quantification over all innocent tests, cf. quantification 
over all innocent contexts. Here we present a representation of inno- 
cent strategies that equates innocently indistinguishable ones, yielding a 
representation of PCF terms that equates precisely those terms that are 
observational equivalent. 

1 Introduction 

In recent years game semantics has provided an accurate model for various pro- 
gramming languages, leading to the first full abstraction results for a variety of 
languages and in a unified way AM99 . In such models programs are interpreted 
as strategies, i.e. highly constrained (sets of) processes; and adding semantic 
power corresponds to weakening restrictions on such sets. 

An early success was providing a the first fully abstract model of PCF 
[AJM951 IHO00) , answering a challenge first posed in [Plo77 . In this case we 
need to restrict our strategies to representing pure functions, using a construct 
known as innocence which states that the strategy isn't allowed to depend on 
the entire history (state) but only part of it; a relevant context. So on the one 
hand we are dealing with intensional processes; but on the other hand we are 
dealing with pure functions (albeit only the sequential ones). This conflict rears 
its head in the full abstraction result for PCF, where observational equivalence 
only holds when one identifies strategies that cannot be distinguished by an 
innocent test. 



Example We shall define two candidate innocent strategies for addition, add|_R 
and addRL over the game NxN^N, which evaluate their arguments left-to- 
right and right-to-left respectively. Let q represent the unique O-question in the 
game N, and m and n range over the natural numbers. Maximal plays of add|_R 
are then of the form: 
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Maximal plays of addRL are of the form: 
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We note that the strategies addRL and addj_R are not equal. However they 
are not distinguishable by any innocent test — for any innocent strategy a : 
(N x N => N) => £ we have add|_R; a = addRL; a. If we identify such innocently- 
indistinguishable strategies, we factor out information such as the number of 
times and order arguments are interrogated, which are irrelevant details in a 
functional world; and it is with respect to this identification that the full ab- 
straction results for PCF in [AJM95, HO00] hold. However, quantifying over all 
innocent strategies doesn't seem far from quantifying over all innocent contexts, 
so it would be better if we could get a more concrete handle on this observational 
preorder. Loader's result [LoaOlj places some restrictions on this: it was shown 
that observational equivalence of PCF and finite base types is undecidable. But 
nonetheless a more concrete presentation can be given: here we introduce a can- 
didate concrete representation of innocent strategies (or PCF terms), and we 
define a map from innocent strategies into this structure. This map identifies 
precisely those strategies that are observationally equivalent. We believe this 
can be used to construct a fully abstract model of PCF explicitly, with no need 
of such a quotienting. 

2 Main Result 

2.1 Views and Duality 

We recall standard definitions from game semantics of arena, justified sequence, 
play, function space, strategy etc from e.g. |AM99j . In particular we recall the 
definition of O-view and P-view: 

Definition We define the P-view of a play by 



• r sp n = r s n p where p is a P-move 



• r si n = i where i is an initial move 
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• r spto n — r s n po, where P-move p is the justificr of O-move o 
We define the O-view of a play 

• l£j = e 

• lsoj = lsjo where o is an O-move 

• \sotpj — \_sjop, where O-move o justifies P-move p 

We also recall the definition of the game £ = ({q, a}, {q n> OQ, a n> PA}, {* h 
q h a},{e, q,qa}) and note that there are two strategies on this game, T = 
{e, qa] and _L = {e}. The game E allows us to note a duality between O-views 
and P- views, since a single-threaded play in A — ¥ £ consists of a play in A with 
the roles of P and reversed. This is useful to us because of the following 
lemma: 

Proposition 2.1 If s is an O-view in the game A then qs is a P-view in A — >• £. 
If qs is P-view in A — > £ erne? s is a play in A, then s is an O-view in A. 

Proof O-views in A are precisely the plays of the form 01P1O2P2O3P3 ■ ■ ■ o n (p n ) 
where the justifier of pi is Oi. A P-view in A — >■ £ ending in A must be of the 
form qp\0\P202 ■ ■ -Pn(o n ) with each Oj justified by the preceding pi, and both 
are a move in A. Then p\0\ . . .p n (o n ) is a play in A and since the parities are 
reversed this is of the form o\p\ . . . o n {p n ) with each pi justified by the preceding 
0^ hence a O-view in A. Clearly also any such O-view in A yields a P-view in 
A — > £ in this manner. | 

Proposition 2.2 Let qss be a play in A — > £ ending in A. Then r q^s n — 
<7£i_sj, in the latter case taking the view with respect to the arena A. 

Proof Induction on s. Base case s = qA- Then r qsqA~ l — <7s<L4 = gsi-g^j. 

Inductive step — if s = s'p then r q?,s'p~ 1 = r q^s' n p = q^^s'_sp = q^s'pj 
since p is an O-move in the game A. If s = s'ps"o with p justifying o then 
r qzs'ps" (P — r gss /_l po = qs^s' jpo = q^is'ps"o_s since (p, 0) are (0,P) moves 
respectively in the game A. | 

In particular we will use this to note that innocent strategies for A —¥ £ (i.e. 
innocent tests for ^4) coincide with O-view functions on A. Further it is known 
|McC96] that Linear Tests Suffice, so we only need consider such O-view func- 
tions that deal with a single thread. 

Definition A set S of well-bracketed O-views over an arena A is O- deterministic 
if soi, SO2 6 S implies o\ =02, each s £ S is single-threaded, each s £ S begins 
with the same initial move. 

Definition If S is an O-deterministic set over the arena A, we can define the 
innocent strategy as ■ A — ¥ £ as a P-view function as — {(<Zss,p) : sp £ 
5} U {{qzt, a s ) : t G S A complete(i)} 

The above uses the observation that if qs is a P-view in A — > £ that does not end 
in as then s is an O-view in A. We note that such strategies yield well-bracketed 
plays since the O-views in S are well-bracketed, hence are the combination of P- 
view/move pairs found in as- We will soon show that innocent tests on A of the 
form as are the only ones needed to distinguish two observationally inequivalent 
strategies; where observational inequivalence comes from the following preorder: 
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Definition Let <r, t : A be innocent strategies. We write a <n, t if for any 
innocent a : A — > £ if <t; a = T then r; a = T. 

2.2 O-view Sets 

We shall now use some of these ideas to show that two innocent strategies 
are observationally equivalent if and only if their sets of O-views of prefixes of 
complete single-threaded plays are the same. 

Definition A play s is O-innocent if for siOi,S202 E s with lsij = i_S2J and 
01,02 O-moves, we have 01 = 02. A play s is P-innocent if for s\p\,S2P2 E s 
with r si n = r S2~ l and pi,P2 P-moves, we have p\ = p2- 

We note that in a world of innocent strategies alone, a strategy is equivalent 
to its set of O-innocent traces (since after all, these are the only traces that 
can be "realised" by an innocent opponent). It is also clear that all plays in an 
innocent strategy are P-innocent. 

Definition Given a play s, define ovw(s) = : { C s}. 

Proposition 2.3 If s is a single-threaded O-innocent complete play, ovw(s) is 
0- deterministic. 

Proof Suppose soi,so2 G ovw(s). Then so\,so2 — ls^j, i_s 2 j. In practice we 
know that i_s[j — lsijoi and \s 2 j = LS2JO2 with lsij = s = LS2J. But then 
si, S2 E s so 01 =02 by O-innocencc of s. 

We know that each s' € ovw(s) is single-threaded, since the O-view of a 
prefix of a single-threaded play is also single-threaded. 

We know that each s' € ovw(s) begins with the same initial move, since each 
s' is the O-view of a prefix of s and as such must begin with the initial move of 
s (since the O-view of a play contains its first move). £ 

We can now substantiate our remark above regarding observational equivalence: 

Proposition 2.4 a <ib r iff for any 0- deterministic set S on A we have 
a; as = T implies r; as = T 

Proof Clearly if a <ib t the RHS holds by innocence of as. 

Conversely, if a <n, t does not hold then we have a such that er; a — T and 
t; a — _L By Linear Tests Suffice we may assume that a consists only of plays 
that interrogate their argument once, i.e. plays which are single-threaded when 
restricted to A. Thus we have an interaction sequence s with s = qss'a^ G a 
with s' 6 a. Since s G as and as is innocent we know s must be P-innocent. By 
12-11 it follows that s' must be O-innocent. Further we know s' is single-threaded 
and complete (by well-bracketedness) , and so ovw(s') is O-deterministic by 12.31 
Also, it is clear that s G a vw(s')- Thus we have cr; a ovw( y) = T. Since a ovw( y) C 
a and r; a = _L it follows that t; a ovw ( S ') = _L since composition is monotonic. 
Hence RHS does not hold in the case that S — ovw(s'). | 

We now formally define the set of observations over a strategy ct, as the O-views 
of the prefixes of the complete, single-threaded, O-innocent plays. 
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Definition Given an innocent strategy a, define obs(cr) = {ovw(s) : s £ a A 
complete(s) A Oinnocent(s) A singlethreaded(s)} 

We thus have two constructions, obs that takes an innocent strategy and returns 
a set of O-view sets, and S <-> as which takes an O-deterministic set and returns 
an innocent strategy. We can relate these constructions. 

Proposition 2.5 Let S be an O-deterministic set on A and a and innocent 
strategy on A. Then a; as — T if and only if S £ obs(cr) 

Proof Suppose cr; as = T. Then exists interaction sequence qsa with s £ a 
complete; and such that if to C s then i_i_io £ S. Thus ovw(s) C S. But 
ovw(s) £ obs(er) since s £ cr is complete (well-bracketedness), O-innocent (since 
gsa £ as is P-innocent), and single-threaded (since S is O-deterministic) so 
S 2 ovw(s) £ obs(cr) as required. 

Conversely, if £ D T £ obs(cr) then T = ovw(i) for some complete, 0- 
innocent, single-threaded play t £ a. Consider the play q^tas in A — >• S. To 
show that a;as = T it will suffice to show that gstaj] G c*s- To see this we 
need to check that for all t' with qst'p C i, ( r q^t'^,p) £ ag where t' is an 
even length sequence. If p = as then we must have t' — t and 12.21 tells us that 
( r gst~ l , as) = (qsL.t_s,a) £ as since l£j is both complete and in ovw(i) = T, 
and hence S". If p is a move in A then ( r gs£ M ,p) = (g£i_t'j,p) £ as since 
i_i'jp = is in ovw(t) = T (and hence 5 1 ). Hence q^ta^ £ aj after all, 

giving us the interaction sequence witness yielding cr; aj = T. | 

2.3 Full Abstraction 

In order to show that a —n, r iff ovw(cr) = ovw(r), we first show an inequational 
version. The observational preorder does not correspond to the subset ordering; 
instead it corresponds to the following ordering: 

Definition Suppose a and r are sets of O-deterministic sets of 0-views over 
an arena A. Write a < os r if VS £ a3T £ t with T C 5. 

It is clear that < os is a preorder. 

Proposition 2.6 cr <i& r i/ anci onZy i/obs(cr) < os obs(r) 

Proof Suppose a <ib t and S £ obs(a). Then bv 12.51 a;as — T. Then by 
assumption r; as = T. Then bv 12.51 S D T £ obs(r). 

Conversely, suppose cr; as = T for some O-deterministic set S finvoking |2.4l) . 
So S D T £ obs(a) byO Then since obs(a) < os obs(r), T D Re obs(r). So 
S3Re obs(r). So by |2.5l r; a? = T, as required. | 

We have now shown that a r iff ovw(er) = os ovw(r). We shall now show 
that this is equality of 0-sets by showing that < os is antisymmetric for the kind 
of sets we are dealing with. 

We note that < os is not antisymmetric on general sets of O-deterministic 
sets. Let a = {{<72<Zi5i, ©Oa}, feOa}} and r = {{02O2}} on the arena N — > N. 
Each set in a and r are O-deterministic, and we have cr = os t with a t. 
However the strategy a does not come from any innocent strategy, since the 
strategy would have to both query and not query its argument. Thus we need 
to put further restrictions on these sets of O-deterministic sets regarding how the 
O-deterministic sets can interact with each other — a condition of determinacy. 



5 



Definition An observational strategy on A consists of a set cr of O-deterministic 
sets over A such that if S, T G cr with S ^ T then there exists a play t and 
O-moves o±, 02 with o\ 7^ 02 such that to\ G S and to2 6 T. 

This says that if two O-deterministic sets differ, then they first differ at an 
O-move. 

Proposition 2.7 For each innocent strategy a, obs(cr) is an observational strat- 
egy- 

Proof Suppose ovw(s) ^ ovw(t). Then it follows that s ^ t. Since s,t E o~ 
they must first differ at an O-move by the determinacy condition on strategies. 
Thus ro\ C s, ro2 E t for 01 ^ 02. Then ltoij = i_r_ioi G ovw(,s) and lto2j = 
i_r_i02 G ovw(t) with 01 ^ 02 as required. | 

Proposition 2.8 // cr is an observational strategy, S,T G cr wif/i SCT i/ien 
5 = T. 

Proof Suppose 5 C T and for contradiction that S ^ T. Then there exists 
01, 02 with toi G S, t02 € T and o± ^02. But then toi € T since S C T. Thus 
toi , to2 G T with Oi 7^ 02 . This contradicts O-determinacy of T. | 

From this it is simple to show that < os is antisymmetric: 

Proposition 2.9 Let a and t be observational strategies such that a < os r and 
t < os a. Then r = a . 

Proof ft will of course suffice to show wlog that a C r. Let S E a. Then since 
a < os t we have T C S with T G r. Then since r < os cr we have S'CT with 
5' G cr. Then 5" C S with both in a so it follows by [2J2 that 5 = S' . Since 
5 C T C S it follows that S = T, i.e. 5 G r as required. | 

We can now show our main result. 

Theorem 2.10 Two innocent strategies a and t are observationally equivalent 
if and only i/obs(cr) = obs(r). 

Proof Suppose a =n, t. Then cr <^ r and t <i6 cr- Then by 12.61 obs(cr) < os 
obs(r) and obs(r) < os obs(cr). But bv 12.71 both obs(cr) and obs(r) are observa- 
tional strategies. Thus bv 12.91 we have obs(cr) = obs(r). 

Conversely if obs(cr) = obs(r) then obs(cr) < os obs(r) and obs(cr) < os obs(r) 
since < os is clearly reflexive. Then a <ib t and r <u, a bv 12.61 so cr t as 
required. | 

To return to our example, it is easy to see that obs(add|_R) = obs(addRi_) 
and the same result is obtained if we consider obs of any other add strategy 
(e.g. interrogation of arguments multiple times). We precisely forget repetition 
and ordering in this construction, and thus only represent "purely functional" 
behaviour. 
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3 A Fully Abstract Model? 



We may use the above result to formulate a fully abstract model for PCF. 

Definition We define the category OBSc- Objects of OBSc are games. An 
arrow s : A — > B is a set of sets of O-views of plays over the game A =>■ B such 
that a — obs(r) for some innocent strategy a s : A =>■ B. The identity e for an 
object A is given by obs(idA) where id^ is the copycat strategy on the game A. 
If s : A — > B and t : B — > C, we define composition s; t as the observational 
strategy given by obs(<r s ; at). 

We can show that composition in OBSc is well-defined via the following propo- 
sition, following from l2.l01 and results in [A~M99 . 

Proposition 3.1 If o~\,oi • A — > B,t : B — >• C are innocent strategies with 
o~i =ib o~2 then <j\\t =h, U2',t. Similarly if a : A —± B,t%,T2 ■ B — > C with 
n =ib r 2 then a; t\ = t b cr; r 2 . 

We can see that OBSc is indeed a category by appealing to associativity 
and identity in the category Ci nn . We can then give a denotation of PCF in this 
category — the denotation of types are the same as that for the game semantic 
model, and the denotation of a term S is given by obs([5]]ib). 

The above treatment gives a concrete fully abstract "model" of PCF, but it 
doesn't give us any extra information about how the terms of PCF look denota- 
tionally. In particular it would be good to define precisely which observational 
strategies come from an innocent strategy, and to define their composition di- 
rectly — this would explicitly yield a categorical model which is full abstract 
for PCF. This seems possible, but many details need checking; this is left for 
future work. 
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